@@ -5,7 +5,7 @@ import semmle.code.xml.AndroidManifest
5
5
import semmle.code.java.dataflow.TaintTracking
6
6
import semmle.code.java.frameworks.Networking
7
7
import semmle.code.java.security.Encryption
8
- import HttpsUrls
8
+ import semmle.code.java.security. HttpsUrls
9
9
10
10
/** An Android Network Security Configuration XML file. */
11
11
class AndroidNetworkSecurityConfigFile extends XmlFile {
@@ -47,7 +47,7 @@ private predicate trustedDomainViaOkHttp(string domainName) {
47
47
)
48
48
}
49
49
50
- /** Holds if the given domain name is trusted by some certifiacte pinning implementation. */
50
+ /** Holds if the given domain name is trusted by some certificate pinning implementation. */
51
51
predicate trustedDomain ( string domainName ) {
52
52
trustedDomainViaXml ( domainName )
53
53
or
@@ -56,11 +56,11 @@ predicate trustedDomain(string domainName) {
56
56
57
57
/**
58
58
* Holds if `setSocketFactory` is a call to `HttpsURLConnection.setSSLSocketFactory` or `HttpsURLConnection.setDefaultSSLSocketFactory`
59
- * that uses a socket factory derrived from a `TrustManager`.
59
+ * that uses a socket factory derived from a `TrustManager`.
60
60
* `default` is true if the default SSL socket factory for all URLs is being set.
61
61
*/
62
62
private predicate trustedSocketFactory ( MethodAccess setSocketFactory , boolean default ) {
63
- exists ( MethodAccess getSocketFactory , MethodAccess initSslContext |
63
+ exists ( MethodAccess getSocketFactory , MethodAccess initSslContext |
64
64
exists ( Method m | setSocketFactory .getMethod ( ) .getASourceOverriddenMethod * ( ) = m |
65
65
default = true and
66
66
m .getDeclaringType ( ) instanceof HttpsUrlConnection and
0 commit comments